CompTIA Security+® Exam Prep Toolkit

CompTIA Security+ Exam Blueprint

This module provides details about the Security+ certification and the benefits of acquiring this certification. The exam format, scoring, domains of knowledge, and how to register for the exam is reviewed.

• Describe CompTIA Security+ certification
• Continuing education requirements
• Testing procedures and parameters
• Understand Security+ domains of knowledge

Domain 1: General Security Concepts

General Security Concepts introduces you to the CIA triad, confidentiality, integrity and availability. This module details physical security, security controls, and the importance of change management. Basics of cryptography algorithms and techniques are reviewed.

• Identify security fundamentals
• Compare and contrast security controls
• Understand the importance of change management
• Apply secure cryptographic principles

Domain 2: Threats, Vulnerabilities, and Mitigations

Threats, Vulnerabilities and Mitigation introduces you to the types of threat actors, some common attack vectors and the increasing threat landscape. You learn to identify vulnerabilities and review common mobile device threats. You review types of malware and learn to identify indicators of compromise as well as explore measures organizations can take to mitigate attacks.

• Compare threat actors
• Analyze vectors and the attack surface
• Understand vulnerabilities
• Recognize malware
• Identify and mitigate threats

Domain 3: Security Architecture

Security Architecture introduces you to infrastructure security concepts including key principles, infrastructure security models and emerging technologies. You will learn about network intrusion detection systems and data protection measures. You will also look at strategies that can ensure your organization can quickly recover from disasters.

• Understand infrastructure security models
• Secure infrastructure
• Protect data
• Implement resilience and recovery

Domain 4: Security Operations

Security Operations will look at common security practices and policies to safeguard information and systems from vulnerabilities. You will learn effective asset management practices and you will review various tools and frameworks to perform monitoring and generate alerts. Identity and access management principles are covered as well as incident response and investigations.

• Inspect common security measures
• Identify proper asset management
• Manage vulnerability in an enterprise
• Monitor security incidents and set up alerts
• Implement strong enterprise security
• Select the appropriate identity and access management
• Automate security

Domain 5: Security Program Management and Oversight

Security Program Management and Oversight helps you understand the importance of effective governance. Defining policies, standards, procedures, roles and responsibilities, and guidelines for security best practices are covered. You learn how to identify, prioritize and mitigate risk as well as how to demonstrate compliance.

• Identify effective governance
• Analyze compliance measures
• Understand risk management
• Explain third-party risk management
• Examine audits and assessments
• Implement security awareness

Final Preparation and Review

Final Preparation and Review covers the examination procedures, some general guidelines and test taking tips. You will be provided a practice exam based on a bank of 600 questions that you can take multiple times.

• Final Practice Exam